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@ Self-configuration of nodes in a distributed message-based operating system. 

g) In a distributed system comprising a plurality of nodes 
(T70-174, FIG. 7), each node is provided with the sama set of 
generic configuration rules which configures the resources for 
the node according to the application requirements and the 
hardware configuration of the node. The resource server 
modules (231-234, FIG. 8) are configurable at run-time by 
node-based configuration management processes (230) in 
accordance with information contained in resource definition 
messages. A resource definition message is derived from a 
resource template message in accordance with the information 
£jl contained in the node definition message. Accordingly, adding 
^ or modifying resources at a given node can be accomplished at 
start-up or at run time without affecting the remainder of the 
|g system. 
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Description 



Self-Configuration of Nodes in a Distributed Message-Based Operating System 
RELATED INVENTIONS 

5 The present invention is related to the following inventions, ail filed on May 6, 1986 and all assigned to the 

assignee of the present invention: 

1 . Title : Nested Contexts in a Virtual Single Machine 
Inventors: Andrew Kun, Frank KoJnick, Bruce Mansfield 
Serial No.: 730,903 

10 2. Title : Computer System with Data Residence Transparency and Data Access Transparency 

Inventors: Andrew Kun, Frank Kolnick, Bruce Mansfield 
Serial No.: 730,929 

3 . Title : Network Interface Module with Minimized Data Paths 
Inventors: Bernhard Weisshaar, Michael Barnea 

15 Serial No.: 730,621 

4. Title : Method of Inter-Process .Communication in a Distributed Data Processing System 
Inventors: Bernhard Weisshaar, Andrew Kun, Frank Kolnick, Bruce Mansfield 

Serial No.: 730,892 ^ 

5. Title: Logical Ring in a Virtual Single'Machine 

20 Inventors:- Andrew Kun, Frank Kolnick, Bruce Mansfield 

Serial No.: 730,923 

6. Title : Virtual Single Machine With Message-Like Hardware Interrupts and Processor Exceptions 
Inventors: Andrew Kun, Frank Kolnick, Bruce Mansfield 

Serial No.: 730,922 

25 The present invention is also related to the following inventions, all filed on even date herewith, and all 

assigned to the assignee of the present invention: 

7. Title: Computer Human Interface Comprising User-Adjustable Window for Displaying or Printing 
Information 

Inventor: Frank Kolnick 
30 Serial No.: 000,625 

8. Title : Computer Human Interface With Multi-Application Display 
Inventor: Frank Kolnick 

Serial No.: 000,620 

9. Title : Object-Oriented Software Architecture Supporting Input/Output Device Independence 
35 Inventor: Frank Kolnick • 

Serial No.: 000,619 

1 0. Title : Process Traps in a Distributed Message-Based Operating System 
Inventors: GaborSimor 
Serial No.: 000,624 

40 12. Title: Computer Human Interface with Multiple Independent Active Pictures and Windows 

Inventors: Frank Kolnick 
Serial No.: 000,626 



TECHNICAL FIELD 

45 This invention relates generally to digital data processing, and, in particular, to a distributed operating 
system which configures the resources required for each node in real time. 

BACKGROUND OF THE INVENTION 
The present invention is implemented in a distributed data processing system - that is, two or more data 
50 processing systems which are capable of functioning independently but which are so coupled as to send and 

receive messages to and from one another. 

Local Area Network (LAN) is an example of a distributed data processing system. A typical LAN comprises a 

number of autonomous data processing "nodes", each comprising at least a processor and memory. Each 

node is capable of conducting data processing operations independently. In addition, each node is coupled 
55 (by appropriate means such as a twisted wire pair, coaxial cable, fiber optic cable, etc.) to a network of other 

nodes which may be, for example, a loop star, tree etc., depending upon the design considerations. 
As mentioned above, the present invention finds utility in such a distributed data processing system, since 

there is a need in such a system for processes which are executing or which are to be executed in the 

individual nodes to shar„e data and to communicate data among themselves. 
60 A "process", as used within the present invention, is defined as a seif-contained package of data and 

executable procedures which operate on that data, comparable to a "task" in other known systems. Within the 

present invention a process can be thought of as comparable to a subroutine in terms of size, complexity, and 

the way it is used. The difference between processes and subroutines is that processes can be created and 
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destroyed dynamically and can execute concurrently with their creator and other "subroutines:. 

Within a process, as used in the present invention, the data is totally private and cannot be accessed from 
the outside, i.e., by other processes. Processes can therefore be used to implement "objects", "modules", or 
other higher-level data abstractions. Each process executes sequentially. Concurrency is achieved through 
multiple processes, possibly executing on multiple processors. 5 

Every prdcess in the distributed data processing system of the present invention has a unique identifier 
(PID) by which it can be referenced. The P!D is assigned by the system when the process is created, and it is 
used by the system to physically locate the process. 

Every process also has a non-unique, symbolic "name", which is a variable-length string of characters. In 
general, the name of a process is known system-wide. To restrict the scope of names, the present invention w 
utilizes the concept of a "context". 

A "context" is simply a collection of related processes whose names are now known outside of the context. 
Contexts partition the name space /nto smaller, more manageable subsystems. They also "hide" names, 
ensuring that processes contained in them do not unintentionally conflict with those ip other contexts. 

A process in one context cannot explicitly communicate with, and does not know about, processes inside 15 
other contexts. All interaction across context boundaries must be through a "context process", thus providing 
a degree of security. The context process often acts as a switchboard for incoming messages, rerouting them 
to the appropriate sub-processes in its context. 

A context process behaves like any other process and additionally has the property that any processes 
which it creates are known only to itself and to each other. Creation of the process constitutes definition of a 20 
new context with the same name as the process. 

Any process can create context processes. Each new context thus defined is - completely contained inside 
the context in which it was created and therefore is shielded from outside reference. This "nesting allows the 
name space to be structured hierarchically to any desired depth. 

Conceptually, the highest level in the hierarchy is the system itself, which encompasses all contexts. 25 
Nesting is used in top-down design to break a system into components or "layers", where each layer is more 
detailed than the preceding one. This is analogous to breaking a task down into subroutines, and in fact many 
applications which are single tasks on known systems may translate to multiple processes in nested contexts. 

A "message" is a buffer containing data which tells a process what to do and/or supplies it with information 
it needs to carry out its operation. Each message buffer can have a different length (up to 64 kilobytes). By 30 
convention, the first field in the message buffer defines the type of message (e.g., "read u , "print", "status", 
"event", etc.). 

Messages are queued from one process to another by name or PID. Queuing avoids potential 
synchronization problems and is used instead of semaphores, monitors, etc. The sender of a message Is free 
to continue after the message is sent. When the receiver attempts to get a message, it will be suspended until 35 
one arrives if none are already waiting in its queue. Optionally, the sender can specify that it wants to wait for a 
reply and is suspended until the specific message arrives. Messages from any other source are not dequeued 
until after that happens. 

Within the present invention, messages are the only way for two processes to exchange data. There is no 
concept of a "gfoba! variable". Shared memory areas are not allowed, other than through processes which 40 
essentially "manage" each area by means of messages. Messages are also the only form of dynamic memory 
that the system handles. A request to allocate memory therefore returns a block of memory which can be used . 
locally by the process but can also be transmitted to another process. 

Messages provide the mechanism by which hardware transparency is achieved. A process located 
anywhere in the system may send a message to any other process anywhere else in the system (even on 48 
another processor) if it knows the process name. This means that processes can be dynamically distributed 
across the system at any time to gain optimal throughput without charging the processes which reference 
them. Resolution of destinations is done by searching the process name space. 

The context nesting level determines the "scope of reference" when sending messages between processes 
by name. From a given process, a message may be sent to all processes at its own level (i.e., in the same 50 
context) and (optionally) to any arbitrary higher level. The contexts are searched from the current context 
upward until a match is found. All processes with the given name at that level are then sent a copy of the 
message. A process may also send a message to itself or to its parent (the context process) without knowing 
either name explicitly, permitting multiple instances of a process to exist in different contexts, with different 
names. 55 

Sending messages by PID obviates the need for a name search and ignores context boundaries. This is the 
most efficient method of communicating. 

It is known in the data processing arts to utilize an expert system to configure the optimum data processing 
hardware and software components for shipment to a customer based upon the customer's order. However, 
such configuration is performed off-line by an independent data processing system. 60 

It is also known to change the number and specific configuration of nodes in a distributed system. However, 
this capability has previously been able to be performed only by taking the system down, making the 
necessary changes to the operating system, recompiling, and relinking. It could not be performed in real-time. 

There is thus a significant need to be able to provide within a data processing operating system the ability to 
configure quickly and efficiently the various resources required by each node. Examples of such resources SB 
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are, for example, terminal ports, windows, files, processes, and I/O devices. Basically in the data processing 
system of the present invention what is meant by a resource is a logic device which is available to an 
application. A resource need not necessarily be related to a physical device. 

5 BRIEF SUMMARY OF INVENTION 

Accordingly, it is an object of the present invention to provide a data processing system having an improved 
operating system. 

It is also an object of the present invention to provide an improved data processing system having an 
operating system which allows resources at any node to be quickly and efficiently configured. 

10 It is another object of the present Invention to provide an improved data processing system having an 
operating system which allows resources at any node to be configured at the start-up time or at run-time. 

It is yet object of the present invention to provide an improved data processing system having an operating 
system wherein resources can be added or modified ait -a given node at start-up time or at run-time without 
adversely affecting the remainder of the system. 

15 These and other objects are achieved in accordance with a preferred embodiment of the invention by 
providing in a distributed data processing system comprising a plurality of interconnected nodes, at teast one 
of said nodes comprising a set of resource configuration rules for configuring resources on any node of the 
system, a method of configuring resources for a specific node of the system, the method comprising the steps 
of a) providing to the specific node a resource definition message and b) utilizing the resource definition 

20 message to configure a resource server module for each resource type needed by the specific node. 

BRIEF DESCRIPTION OF THE DRAWINGS . ' 

The invention is pointed out with particularity in the appended claims. However, other features of the 
invention will become more apparent and the invention will be best understood by referring to the following 
25 detaifed description in conjunction with the accompanying drawings in which: 

FIG. 1 shows a representational illustration of a single network, distributed message-based data 
processing system of the type incorporating the present invention. 

FIG. 2 shows a block diagram illustrating a multiple-network, distributed message-based data 
processing system of the type incorporating the present invention. 
30 FIG. 3 shows an architectural model of a data processing system of the type incorporating the present 

invention. 

FIG. 4 shows the relationship between software contexts and processes as they relate to the present 
invention. 

FIG. 5 show how messages may be sent between processes within nested contexts. 
35 FIG. 6 shows the standard format of a message in a distributed data processing system of the type 

incorporating the present invention. 

FIG. 7 shows how Resource Template Messages, Node Definition Messages, and Resource Server 
Modules are used in the present invention. 

FIG. 8 shows in flow diagram form how Resource Definition Messages are generated to a Resource 
40 Server Module. 

FIG. 9A shows a flowchart illustrating the initial Resource Processing module of the present invention. 
FIG. 9B shows a flowchart illustrating the Instantiate Resource module of the present invention. 
FIG. 9C shows a flowchart illustrating a module to Derive Resource Definition Message from Resource 
Template. 

45 FIG. 9D shows a flowchart illustrating a module to Check Resource Attributes in this Node 

Environment. 

OVERVIEW OF COMPUTER SYSTEM 
With reference to FIG. 1, a distributed computer configuration is shown comprising multiple nodes 2-7 
50 (nodes) loosely coupled by a local area network (LAN) 1 . The number of nodes which may be connected to the 
network is arbitrary and depends upon the user application. Each node comprises at least a processor and 
memory, as will be discussed in greater detail with reference to FIG. 2 below. In addition, each node may also 
include other units, such as a printer 8, operator display module (ODM) 9, mass memory module 13, and other 
I/O device 10. 

55 With reference now to FIG. 2, a multiple-network distributed computer configuration is shown. A first local 
area network LAN 1 comprises several nodes 2,4, and 7. LAN 1 is coupled to a second local area network 
LAN 2 by means of an Intelligent Communications Module (ICM) 50. The Intelligent Communications Module 
provides a link between the LAN and other networks and/or remote processors (such as programmable 
controllers). 

60 LAN 2 may comprise several nodes (not shown) and may operate under the same LAN protocol as that of 
the present invention, or it may operate under any of several commercially available protocols, such as 
Ethernet; MAP, the Manufacturing Automation Protocol of General Motors Corp.; Systems Network 
Architecture (SNA) of International Business Machines, Inc.; SECS-li; etc. Each ICM 50 is programmable for 
carrying out one of the above-mentioned specific protocols. In addition, the basic processing module of the 

65 node itself can be used as an intelligent peripheral controller (IPC) for specialized devices. 



4 



0 274 406 



10 



LAN 1 is additionally coupled to a third local area network LAN 3 via ICM 52. A process controller 55 is also 
coupled to LAN 1 via ICM 54. # , . t . 

A representative node N (7, FIG. 2) comprises a processor 24 which, in a preferred embodiment, is a 
processor from the Motorola 68000 family of processors. Each node further includes a read only memory 
(ROM) 28 and a random access memory (RAM) 26. in addition, each node includes a Network Interface 
Module (NIM) 21, which connects the node to the LAN, and a Bus Interface 29, which couples the node to 
additional devices within a node. While a minimal node is capable of supporting two peripheral devices, such 
as an Operator Display Module (ODM) 41 and an I/O Module 44, additional devices (including additional 
processors such as processor 27) can be provided within a node. Other additional devices may comprise, for 
example, a printer 42, and a massstorage module 43 which supports a hard disk and a back-up device (floppy 
disk or streaming tape drive). . 

The Operator Display Module 41 provides a keyboard and screen to enable an operator to input information 
and receive visual information. 

While a single node may comprise all of the above units, in the typical user application individual nodes will 
normally be dedicated to specialized functions. For example, one or more mass storage nodes may be set up 15 
to function as data base servers. There may also be several operator consoles and at. least one node for 
generating hard-copy printed output. Either these same nodes, or separate dedicated nodes, may execute 
particular application programs. .... 

The system is particularly designed to provide an integrated solution for factory automation data 
acquisition, and other real-time a D plications. As such, it includes a full complement of services, such as a so 
graphical output, windows, menus, icons, dynamic displays, electronic mail, event recording, and file 
management. Software development features include compilers, a window-oriented editor, a debugger, and 
performance-monitoring tools. 

25 

Local Area Network t . 

The local area network, as depicted in either FIG.1 or FIG. 2, ties the entire system together and makes 
possible the distributed virtual machine model described below. The LAN provides high throughput, 
guaranteed response, reliability, and low entry cost. The LAN is also autonomous, in the sense that all system 
and applications software is unaware of its existence. For example, any Network Interface Module (e.g. NIM 21, 
FIG 2) could be replaced without rewriting any software other than that which directly drives it. 30 

The LAN interconnection medium may be twisted-pair or coaxial cable. Two channels (logically, two distinct 
networks) may be provided for reliability and for increased throughput. 

The LAN architecture is a logical ring, in which an electronic "token" is constantly passed from node to node 
at high speed. The current holder of the token may use it to send a "frame" of data or may pass it on to the next 
node in the ring. The NIM only needs to know the logical address and status of its immediately succeeding 35 
neighbor. The NIM's responsibility is limited to detecting the failure of that neighbor or the Inclusion of a new 
neighbor In general, adjustment to failed or newly added nodes is automatic. 

The network interfaces maps directly into the processor's memory. Data exchange occurs through a 
dual-ported buffer pool which contains a linked list of pending "frames". Logical messages, which vary m 
length are broken into fixed-size frames for transmission and are reassembled by the receiving NIM. Frames 40 
are sequence-numbered for this purpose. If a frame is not acknowledged within a short period of time, it is 
retransmitted a number of times before being treated as a failure. ' 

As described above with reference to FIG. 2, the LAN may be connected to other LAN's operating under the 
same LAN protocol via so-called "bridgewaysV or it may be connected to other types of LAN's via "gateways . 

Software Model 

The computer operating system of the present invention operates upon processes, messages and 
contexts, as such terms are defined herein. Thus this operating system offeFs the programmer a hardware 
abstraction, rather than a data or control abstraction. t 

Processes are referenced without regard to their physical location via a small set of message-passing 50 
primitives. As mentioned earlier, every process has both a unique system-generated identifier and a not 
necessarily unique name assigned by the programmer. The identifier provides quick direct access, while the 
name has a limited scope and provides symbolic, indirect access. 

With reference to FIG. 3, an architectural model of the present invention is shown. The bottom, or hardware, 
layer 63 comprises a number of processors 71-76, as described above. The processors 71-76 may exist 55 
physically within one or more nodes. The top, or software, layer 60 illustrates a number of processes P1-P10 
which send messages m1-m6 to each other. The middle layer 61, labelled "virtual machine", isolates the 
hardware from the software, and it allows programs to be written as if they were going to be executed on a 
single processor. Conversely, programs can be distributed across multiple processors without having been 
explicitly designed for that purpose. 
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The Virtual Machine Ll ... 

As discussed earlier, a "process" is a self-contained package of data and executable procedures which 
operate on that data. The data is totally private and cannot be accessed by other processes. There is no 
concept of shared memory within the present invention. Execution of a process is strictly sequential. Multiple 65 
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processes execute concurrently and must be scheduled by the operating system. The processes can be 
re-entrant, in which case only one copy of the code is loaded even if multiple instances are active. 

Every process has a unique "process identifier number" (P1D) by which it can be referenced. The P1D is 
assigned by the system when the process is created and remains in effect until the process terminates. The 

5 PID assignment contains a randomizing factor which guarantees that the PID will not be re-used in the near 
future. The contents of the PID are irrelevant to the programmer but are used by the virtual machine to 
physically locate the process. A PID may be thought of as a "pointer" to a process. 

Every process also has a "name" which is a variable-length string of characters assigned by the 
programmer. A name need not be unique, and this ambiguity may be used to add new services transparently 

10 and to aid in fault-tolerance. 

FIG. 4 illustrates that the system-wide name space is partitioned into distinct subsets by means of 
"contexts" identified by reference numerals 90-92. A context is simply a collection of related processes whose 
names are not known outside of the context. Context 90, for example, contains processes A, a, a, b, c, d, and 
e. Context 91 contains processes B, a, b, c, and f. And context 92 contains processes C t a, c, d, and x. 

15 ~ One particular process in each context, called the" "context process", is known both within the context and 
within the immediately enclosing one (referred to at its "parent context"), in the example illustrated in FIG. 4, 
processes A-C are context processes for contexts 90-92, respectively. The parent context of context 91 is 
context 90, and the parent context of context 92 is context 91 . Conceptually, the context process is located on 
the boundary of the context and acts as a gate into it. 

20 Processes inside context 92 can reference any processes inside contexts 90 and 91, by name. However, 
processes in context 91 can only access processes in context 92 by going through the context process C. 
Processes in context 90 can only access processes in context 92 by going through context processes B and 
C. 

The function of the context process is to filter incoming messages and either reject them or reroute them to 
25 other processes in its context. Contexts may be nested, allowing a hierarchy of abstractions to be 
constructed. . A context must reside completely on one node. The entire system is treated as an 
all-encompassing context which is always present and which is the highest level in the hierarchy. In essence, 
contexts define localized protection domains and greatly reduce the changes of unintentional naming 
conflicts. 

30 If appropriate, a process inside one context can be "connected" to one inside another context by 
exchanging PID's, once contact has been established through one or the other of the context processes. 
Most process servers within the present invention function that way. Initial access is by name. Once the 
desired function (such as a window or file) is "opened", the user process and the service communicate directly 
via PID's. 

35 A "message" is a variable-length buffer (limited only by the processor's physical memory size) which carries 
information between processes. A header, inaccessible to the programmer, contains the destination name 
and the sender's PID. By convention, the first field in a message is a null-terminated string which defines the 
type of message (e.g., "read", "status", etc.) Messages are queued to the receiving process when they are 
sent Queuing ensures serial access and is used in preference to semaphores, monitors, etc. 

40 Messages provide the mechanism by which hardware transparency is achieved. A process located 
anywhere in the virtual machine can send a message to any other process if it knows its name. Transparency 
applies with some restrictions across bridgeways (i.e., the interfaces between LAN's operating under identical 
network protocols) and, in general, not all across gateways (i.e., the interfaces between LAN's operating under 
different network protocols) due to performance degradation. However, they couid so operate, depending 

45 upon the required level of performance. 

With reference now to FIG. 5, the relationship of external events to processes will now be described. The 
virtual machine makes devices look like processes. For example, when an interrupt occurs in an external 
device 101 , the virtual machine kernel 61 queues an interrupt message 103 to a specific process 104, known as 
an "external event service process" (EESP), functioning as the device manager. For efficiency, the message is 

50 pre-ailocated once and circulates between the EESP and the kernel. The message contains just enough 
information to indicate the occurrence of the event. The EESP performs ail hardware-specific functions related 
to the event, such as setting control registers, moving data 105 to a user process 106, transmitting "Read" 
messages from the user process 106, etc., and then "releasing' 1 the interrupt. 

To become an EESP, a process issues a "connect" primitive specifying the appropriate device register(s). It 

55 must execute a "disconnect" before it exits. Device-independence is achieved by making the message 
protocol between EESP's and applications processes the same wherever possible. 

Inter-Process Communication 

Alt inter-process communication is via messages. Consequently, most of the virtual machine primitives are 
60 concerned with processing messages. The virtual machine kernel primitives are the following: 
ALLOC- requests allocation of a (message) buffer of a given size. 
FREE- requests deallocation of a given message buffer. 
PUT- end a message to a given destination (by name of PID). 

G£T-wait for and dequeue the next incoming message, optionally from a specific process (by PID). 
65 FORWARD -pass a received message through to another process. 
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CALL - send a message, then wait for and dequeue the reply. 
REPLY- send a message to the originator of a given message. 

ANY — MSG - returns "true" if the receive queue is not empty, else returns "false"; optionally, checks rf any 
messages from a specific PiD are queued. 

To further describe the function of the kernel primitives, ALLOC handles all memory allocations. It returns a 5 
pointer to a buffer which can be used for local storage within the process or which can be sent to another 
process (via PUT, etc.). ALLOC never "fails", but rather waits until enough memory is freed to satisfy the 
request. 

The PLTprimitive queues a message to another process. The sending process resumes execution as soon 
as the message is queued. 10 
. FORWARD is used to quickly reroute a message but maintain information about the original sender 
(whereas PUT always makes the sending process the originator of the message). 

REPLY sends a message to the originator of a previously received message, rather than by name or PID. 
' CALL essentially implements remote subroutine invocations, causing the caller to suspend untrt the receiver 
executes a REPLY. Subsequently, the replied message is dequeued out of sequence, immediately upon is 
arrival, and the caller resumes execution. 

The emphasis is on concurrency, so that as many processes as possible are executed in parallel. Hence 
neither PUT nor FOR WA RD waits for the message to be delivered. Conversely, <3£Tsuspends a process until 

a message arrives and dequeues it in one operation. The ANY. MSG primitive is provided so that a process 

may determine whether there is anything of interest in the queue before committing itself to a GET. 20 

When a message is sent by name, the destination process must be found in the name space. The search 
path is determined by the nesting of the contexts in .which the sending process resides. From a given process, 
a message can be sent to all processes in its own context or (optionally) to those in any higher context. Refer 
to FIG. 6. The contexts are searched from the current one upward until a match is found or until the system ' 
context is reached. All processes with the same name in that context are then queued a copy of the message. 25 

For example, with reference to FIG. 6, assume that in context 141 process y_ sends a message to ALL 
processes by the name x. Process y_ first searches within its own context 141 but finds no process x. The 
process y_ searches within the next higher context 131 (its parent context) but again finds no process x?Then 
process y searches within the next higher context 110 and finds a process x, identified by reference numeraf 
112. Since it is the only process x in context 110, ft is the only recipient of the message from process y_. 30 

If process a in context 131 sends a message to ALL processes by the name x, it first searches within its own 
context 131 and, finding no processes x there, it then searches within context 1 10 and finds process x. 

Assume that process b in context 131 sends a message to ALL processes by the name A. It would find 
process A (111) in context 110, as well as process A (122) which is the context process for context 121. 

A process may also send a message to itself or to its context process without knowing either name 35 
explicitly. 

The concept of a "logical ring" (analogous to a LAN) allows a message to be sent to the NEXTprocess in the 
system with a given name. The message goes to exactly one process in the sender's context, if such a process 
exists. Otherwise the parent context is searched. 

The virtual machine guarantees that each NEXT transmission will reach a different process and that 40 
eventually a transmission will be sent to the logically "first" process (the one that sent the original message) in 
the ring, completing the loop. In other words, all processes with the same name at the same levef can 
communicate with each other without knowing how many there are or where they are located. The logical ring 
is essential for distributing services such as a data base. The ordering of processes in the ring is not 
predictable. 45 

For example, if process a (125) in context 121 sends a message to process a using the NEXT primitive, the 
search finds a first process a (124) in the same context 121. Process a (124) is marked as having received the 
message, and then process a (124) sends -the message on to the NEXT process a (123) in context 121. 
Process a (123) is marked as having received the message, and then it sends the message on to the NEXT 
process a, which is the original sender process a (125), which knows not to send it further on, since it's been 50 
marked as having already received the message. 

Sending messages directly by PID obviates the need for a name search and ignores context boundaries. 
This is known as the DIRECT mode of transmission and is the most efficient. For example, process A (111) 
sends a message in the DIRECT mode to process y_ in context 141. ~~ 

if a process sends a message in the LOCAL transmission mode, it sends it only to a process having one 55 
given name in the sender's own context. 

In summary, including the O/HECrtransmission mode, there are five transmission modes which can be used 
with the PUT, FORWARD, and CALL primitives: 

ALL - to all processes with the given name in the first context which contains that name, starting with the 
sender's context and searching upwards through all parent contexts. 60 
LOCAL - to all processes with the given name in the sender's context only. 

NEXT- to the next process with the given name in the same context as the sender, if any; otherwise it 
searches upwards through all parent contexts until the name is found. 

LEVEL - sends to "self" (the sending process) or to "context" (the context process corresponding to the 
sender's context); "self" cannot be used with CALL primitive. 65 



7 



0 274 406 



DIRECT- sent by PiD. 

Messages are usually transmitted by queueing a pointer to the buffer containing the message, A message is 
only copied when there are multiple destinations or when the destination is on another node. 

5 Operating System 

The operating system of the present invention consists of a kernel, which implements the primitives 
described above, plus a set of processes which provide process creation and termination, time management 
(set time, set alarm, etc.) and which perform node start-up and configuration. Drivers for devices are also 
implemented as processes (EESP's), as described above. This allows both system services and device drivers 
10 to be added or replaced easily. The operating system also supports swapping and paging, although both are 
. invisible to applications software. 

Unlike known distributed computer systems, that of the present invention does not use a distinct "name 
server 0 process to resolve names. Name searching is confined to the kernel, which has the advantage of being 
much faster. 

15 A minimal bootstrap program resides permanently (in ROM) on every node, e.g. ROM 28 in node N of FIG. 2. 
The bootstrap program executes automatically when a node is powered up and begins by performing basic 
on-board diagnostics. It then attempts to find and start an initial system code module. The module is sought on 
the first disk drive on the node, if any. If there isn't a disk, and the node is on the LAN, a message will be sent 
out requesting the module. Failing that, the required software must be resident in ROM. The initialization 

20 program- of the kernel sets up all the kernel's internal tables and then calls a predefined entry point of the 
process. 

Thus there is no well-defined meaning for "system up" or "system down" - as long as any node is active, the 
system as a whole may be considered to be "up". Nodes can be shut down or started up dynamically without 
affecting other nodes on the network. The same principle applies, in a limited sense, to peripherals. Devices 
25 which can identify themselves with regard to type, model number, etc. can be added or removed without 
operator intervention. 

Standard Message Format 

FIG. 6 shows the standard format of a message in a distributed data processing system of the type 
30 incorporating the present invention. The message format comprises a message i.d. portion 150; one or more 
"triples" 151, 153, and 155; and an end-of-message portion 160. Each "triple" comprises a group of three 
fields, such as fields 156-158. 

The first field 156 of "triple" 151, designated the PORT field, specifies that the data field represents the name 
of the process to be created. The second field 157 of "triple" 151 gives the size of the data field. The third field 
35 158 is the data field. 

The first field 159 of "triple" 153, designated the PNTF field, specifies that the data field represents the name 
of the process to notify when the process specified in the PCRT field has been created. 

A message can have any number of "triples", and there can be multiple "triples" in the same message 
containing PCRT and PNTF fields, since several processes may have to be created for the same resource. 
40 As presently implemented, portion 150 is 16 bytes in length, field 156 is 4 bytes, field 157 is 4 bytes, field 158 
is variable in length, and EOM portion is 4 bytes. 

Resource/Connector Model 
The distributed system of the present invention may be viewed at several levels of complexity. The base level 
45 is the virtual machine, which defines and implements the device-independent architecture, consisting of virtual 
"instructions", i.e. the kernel primitives. 

Layered immediately above this, and closely related to it, is the process/message model which defines how 
programs are configured in the system and how they communicate with each other. 
Just above this level is a more abstract model dealing with "resources" and "connectors". As mentioned 
50 earlier, resources may be thought of as "logical devices". Resources are accessed through "connectors", 
which are essentially logical "pointers". 

An application must have a connector to a resource in order to interact with it Connectors are granted and 
controlled by "resource manager processes", i.e. processes which can be requested to create, delete, etc. 
resources. 

55 Resource manager processes, respond to connector messages to "create" new resources and "delete" old 
ones, and to "open" an existing resource (i.e. ask for a connection to it) and later to "close" it (terminate the 
connection to it). 

The response to creating a resource, or opening a connection to it, is a connect message. This message 
contains a service-independent connector data structure which uniquely identifies the resource. 
60 An application may create a new resource, or acquire access to an existing one, by making a request to the 
appropriate resource manager process. (Note that all resources remain controlled and protected by the 
resource manager process, and they are kept in its context.) As a result, a connector to the resource is 
■ returned to the application, allowing it to communicate directly with the resource. Note that, in genera! two 
connectors are required - one for the resource manager process, and one for the resource (although in many 
65 cases the resource manager process can be accessed by name). 
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When a connector is received in a message, it identifies a specific resource to which the receiving process 
has access. The entire connector must be copied into subsequent request messages to the resource. The 
messages themselves are usually sent in "direct" mode, passing the address of the connector As mentioned 
above, messages to the resources manager can be sent by name, if appropriate, or via an explicit connector 
(to the manager), if available. 

Both "create" and "open" requests to the resource manager process usually expect a process name as a 
parameter and both return a connection message. A "create" request without a name causes the service to 
aenerate a unique name. An "open" request using a connector instead of a name may be employed to access 
The resource differently or to gain access to a closely related resource. The "delete and close requests may 
accept either an explicit connector to the resource or the resource's name. 

There are five formats for connection messages: "create", which requests the creation of a new resource, 
"open" which establishes a connection to an existing resource; "delete", which requests that a specified 
resource be removed from the system; "close" which requests that the connection to a resource be 
terminated- and "connect", which provides a connection to a resource. The "connect message normally 
represents a response to a "create" or "open" request and is not generally sent unsolicited 

Data exchange messages are another type of message used in the distributed system of the present 
invention. Data in any format is sent solely by means of the "write" message. Data is requested by the read 
message (to which "write" or "failed" are the only responses. ... 

Process which only generate data should respond with "failed" to "write" requests. Conversely, a write-only 
resource should return "no data" (i.e. a "write" message without a data "triple") if it receives a read request 

There are two formats for data exchange messages: "write", which is used to send data; and read , which 
is used to request data. A "write" message includes the source of the data, the destination resource, the 
originator of the data, the type of data (if known), and it contains a block of data. A "read message includes 
the destination resource, an optional prompt string (which must be written exactly before any data is read), 
and a protect parameter which indicates that the input should be protected if possible 

Appropriate status messages are used to convey the completion status of a request or the current state of 
a service or resource. In the latter case, the status message may be requested explic.tly or may be sent as the 
result of an synchronous event within the resource itself. 

There are four formats for status messages: "query", which asks for the current status of a resource; 
"done" which indicates that a previous request has successfully completed; "failed . which indicates that a 
previous request has not completed; and "status", which gives the status of a resource, either in response to 
"query" or as the result of an asynchronous condition. 



DETAILED DESCRIPTION OF THE INVENTION 



Resource Template Messages and Resource Definition Messages 

In the distribution system of the present invention there are one or more nodes. Each node comprises a set 
of Resource Server Modules. A Resource Server Module is a process that controls one or more part.cular 
resources of the same class. For example a Resource Server Module may take the form of a data manager, 
human interface manager, network interface module (NIM), port manager, message server debugger, console 
manager, event manager, command line interpreter, etc. Each Resource Server Module is run-t,me 
configurable in accordance with information contained' within a Resource Definition Message. 

A Resource Service Module consists of at least one resource manager process described above in the 
section entitled "Resource/Connector Model", and it is also the granule of self-configuration of the node 
which is controlled by Resource Definition Messages. It is also fully responsible for autonomously configuring 
and controlling further possible processes within or outside of the context of the main resource manager 
process if it is necessary far serving the particular class of resources. . 

The Resource Server Modules are themselves created by a Configuration Management Process resident on 
each node. It is the responsibility of the Configuration Management Process to select and create the Resource 
Server Modules for its node, and to compose and send the appropriate Resource Definition Messages to the 
Resource Server Module in accordance with the given configuration requirements. 

A Resource Definition Message is what provides all of the attributes of the resource to be served as well as 
all relevant attributes of the running environment. The Resource Definition Message tells how to configure the 
resource and tells the Resource Server Module what to do. Each Resource Definition Messages is denved 
from a Resource Template Message. ... * tt , ♦ 

A Resource Template Message is what defines the attributes of a resource for all node environments that 
are reasonable to expect. Resource Template Message contain the necessary rules and information for 
enabling each nodal subsystem to configure itself. A Resource Template Message is. a genenc form of 
Resource Definition Message. There are generally a plurality of Resource Template Messages for the ent.re 



system. 



Confiouration Control Attributes ' . . 

Each Resource Template Message, Resource Definition Message, and Node Definition Message composes 
a set of attributes. An attribute includes an attribute name and an attribute value. A++ , ; K,,+ a e 

Resource Template Messages contain a set of special attributes called the Configuration Control Attributes. 
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These attributes control the implementation of Resource Definition Messages from a Resource Template 
Message by the Configuration Management Process. 

The Configuration Control Attributes and their meanings are given as follows: 
FEATURE -the whole resource is conditional on a Node Definition Message attribute 
5 SUBSTITUTE -a Node Definition Message attribute value is to be used as a Resource Definition Message 
attribute 

CONDITIONAL - a Resource Definition Message attribute has values conditional on Node Definition Message 
attributes 

FILE -the content of a specific file is to be used as Resource Definition Message attribute value 
10 ADDRESS/NO ADDRESS - the whole resource is conditional on the existence or absence of a given bus 
address 

PROCESS/NO PROCESS - the whole resource is conditional on the existence or absence of a process with a 
given name 

CREATE RSM- create a Resource Server Module 

15 NOTIFY RSM - send this Resource Definition Message to a Resource Server Module 

GLOBAL - the Resource Server Module has to be transparently accessible in the network; if set, the 
synchronization and connection to this resource can be requested anywhere in the network where needed 
GROUP -the Resource Definition Message is the header of a group of resources 
CONNECTION '- a Resource Template Message attribute to poof resources into a group - 

20 OPTION -tells what to do if the resource, service, cannot be started 
UP EVENT- an attribute for reporting resource- service availability 
SYNCH- another resource type which the resource service depends upon 

The FEATURE, SUBSTITUTE, CONDITIONAL, FILE, ADDRESS, NO ADDRESS, PROCESS, and NO 
PROCESS and attributes are the most important, and they are used by the Configuration Management 

25 Process to convert the Resource Template Messages into Resource Definition Messages. 

Node Template Messages and Node Definition Messages 

A Node Definition Message describes the concrete node environment. Generally, there is one Node 
Definition Message for each node. Node Definition Messages are structured identically to Resource Definition 
30 Messages and Resource Template Messages. 

A Configuration Management Process composes and sends the appropriate Resource Definition Messages 
to the Resource Server Modules in accordance with the informational content of a Node Definition Message 
and all Resource Template Messages. That is, the Configuration Management Process on each node reads the 
Node Definition Message for that node, as well as all possible Resource Template Messages, and it generates 
35 the Resource Definition Messages for that node. 

FiG. 7 shows how Resource Template Messages, Node Definition Messages, and Configuration 
Management Processes are used in the present invention. FIG. 7 shows a distributed system comprising 
nodes 170-174. Other nodes may also be coupled to this network, as represented by dotted connection 175. 
Each node requires one or more resources to support it. During the configuration of, for example, node 171 , a 
40 Configuration Management Process (CMP) resident at node 171 utilizes one or more Resource Template 
Messages (RTM) and a Node Definition Message (NDM) and generates Resource Definition Messages to the 
Resource Server Modules (RSM) also resident at node 171. 

In general, a Resource Definition Message looks almost like a Resource Template Message, except that 
values in certain fields are different. This is because the values in certain fields are conditional upon node 
45 attributes in the Node Definition Message or upon the content of specified files in the file system. 

Node Definition Messages can be derived from Node Template Messages, just as Resource Definition 
Message are derived from Resource Template Messages. A Node Template Message is the generalization of 
all possible Node Definition Messages in the system. In this way several heirarchical layers of 
self-configuration of the operating system can be built. In the bottom layer there are elementary resources, 
50 whereas in the higher layers more complex resource clusters can be configured. 

As explained above and in the accompanying flowcharts shown in FIGS. 9A-9D and described hereinafter, 
Resource Definition Messages are derived by making checks and substitutions from Resource Template 
Messages and a Node Definition Message. Using appropriate knowledge engineering techniques, an expert 
system could be utilized to derive Resource Definition Messages from more complex forms of Resource 
55 Templates and by also making inferences at run-time in additional checks and substitutions. 

if the Resource Template Messages and Node Definition Messages themselves can be generated by an 
expert system, this makes available a new dimension of configuration expert system heirarchies, with the 
configuration of run-time resources at the bottom level and configuration of product design at the higher 
levels. 

60 FIG. 8 shows in flow diagram form how Resource Definition Messages are generated to a Resource Server 
Module. A Configuration Management Process 230 utilizes a Node Definition Message (which may be derived 
from a Node Template Message) and a quantity N of Resource Template Messages to generate a quantity M of 
Resource Definition Messages (M always being less than N). Then a Resource Server Modules 231-234 use 
the Resource Definition Messages to configure the various nodal resources. Examples of these modules are 

65 an Event Manager 231, a Console Manager 232, a Port Manager 233, and a Debug Manager 234. 
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SZ orating system comprises the kerne,, the Process Manager Process, and 

andl??erf?r™ the process notifications and process creations using the serv,ces of the kernel and the 
Process Manager Process, as specified by the Resource Template Messages. 

The Resource Definition Messages for initial node start-up are stored ,n conf.gu at on filee. n i orde to 
access thesi configuration files, further operating system services must be included in the start-up module 
fncludfng fS management services, the network interface module (NIM). and clock management. These w 
hn itTn LrvLs are also started up by Interpreting resource definitions by the Configuration Management 
SocTss T^ere is no difference between the representation and the interpretation of the ^resource ; def ir^ons 
Tn ^he configuration files and for the built-in services other than that the latter ones are built Into the start-up 

m The e configuration and process management services that are requested at node start-up time can be 75 
invoked ?atefat any time by sending standard request messages to these serv.ce processes. Therefore the 
operating system is dynamically reconfigurable at run-time. Definition 
As described above, the Configuration Management Process at each node reads the Node Defin ion 

oonSgSL "le descrtpflons are represented in data structures (Resource Template Messages and Mod. 

Definition Messages) which are accessible at run-time. ., rmfl , n , , t , DOSSib [ e to define 

New nodes can also be added without any change In configuration information, since it is • possioie to OBtine 

fcrsrasrs « r;,; s . sis 

MrueTur.s and no run-time syntax conversion of the configuration information is needed. 
Tn. configuration Information represented by the Resource Template Messages and Nod. D.M too 

=^ 

'^hTsy'nchronization of configuration events can al.o be ea.i.y m.n.g.d usins , the present invention^ since 
the Resource T.mplete Messages may cont.ln synchronization 

Se TneVop.r sequencing can be specified by attribute information in '; i ^ T " l ^SSi 

^rc^^ 

V^TSlSSee. rather than by having to aiter the operating system code. Th.s is a very ,mp 0 rtant 

advantage in a distributed operating system. 

whether the resource to process .sin this start-up phase. If YES the routine P r °^eu* 

resource attributes are checked in this node environment. In decision block 182 if the de ™m me 
emplate can be created the routine passes to decision block 183; If not it 

^decision block 183. if a new resource group is to be opened X 
new resource group is inserted in the list of resource groups, and tnen to block f 5 * 0 ^^ ^ ratine 
resource is part of other groups. In decision block 183. if a new resource group Is not to be opened, the rouhne 
passes to decision block 186. 
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In decision block 1 86, if the resource is part of other groups the routine passes to decision block 1 88. If not, 
it passes to block 187 where the resource is instantiated (i.e. processes of Resource Server Modules are 
created, and Resource Definition Messages are created and sent to processes). In decision block 188 if there 
are no more resources in the list of templates, the routine proceeds to block 189 where the resource groups 
5 are instantiated. If there are more resources in the list of templates, the routine returns to decision block 180 
for further processing. 

FIG. 9B shows a flowchart illustrating the Instantiate Resource modufe of the present invention, while 
module is also contained within Program Listing A attached hereto. In decision block 190, if the resource is to 
be synchronized the routine passes to block 191 , where the resource Is enqueued for synchronization. If not, it 
10 passes to decision block 192. 

If the resource is enqueued for synchronization, after the specified synchronization event has been reported 
to configuration management, the routine is re-entered to proceed with processing this resource template. 

In decision block 192, if the resource template specifies any attribute the value of which has to be replaced 
by a given file content, the routine proceeds to block 193; else it proceeds to block 194. In block 193 the 
15 specified file is attempted to be opened in order to start substituting the attribute value by the file content, and 
the routine exits. It wili be re-entered to start processing the resource template again after the file has been 
read in and the attribute has been modified. 

In decision block 194, if the process to be created exists, the routine proceeds to decision block 197. It not, 
it proceeds to block 195, where an attempt is made to create it. In decision block 196, if the attempt at creating 
20 the process was successful, the routine proceeds to decision block 1 97. If not, it proceeds to block 203, where 
the resource creation is identified as failed. 

In decision block 197, if there are more processes to create, the routine returns to decision block 194, but if 
not the proceeds to decision block 198. In decision block 198, if the process to be notified exists, the routine 
passes to block 199, but if not it proceeds to block 203. In block 199 the resource definition message is derived 
25 from the resource template message, and the routine then passes to block 200, where the resource definition 
message is sent to the process. 

Then the routine passes to decision block 201, where, if there are more processes to notify, it returns to 
decision block 198, but if not it proceeds to block 202, where the resource is checked to see if it is to be used 
to access more templates. 

30 FIG. 9C shows a flowchart illustrating a module to Derive Resource Definition Message from Resource 
Template, which module is also contained within Program Listing A attached hereto. In decision block 231, if 
there are attributes to be checked in the node definition or to be replaced by fiies, the routine passes to block 
233, where the resource template definition is duplicated, if not, the routine proceeds to block 232 T where the 
resource message is made by duplicating the tempiate, and then the routine exits. 
35 After block 233, the routine proceeds to block 234, where a check for attributes is made in the node 
definition. In decision block 235, if a valid attributes is found in the node definition, the routine proceeds to 
block 236, but if not it proceeds to block 237. in block 236 the node attribute is used, and the routine proceeds 
.to decision block 238. In block 237 the attribute is removed from the resource message. In decision block 238, 
if there are more attributes to check, the routine returns to block 234, but if not it proceeds to block 239, where 
40 it inserts all file contents that have been specified in the template as attribute values and that all have already 
been read in the memory. 

FIG. 9D shows a flowchart illustrating a module to Check Resource Attributes in this Node Environment, 
which module is contained within Program Listing B attached hereto. In decision block 210, if there is a node 
feature to check, the routine proceeds to decision block 211, but if not it proceeds to decision block 212. In 
45 decision block 211, if the node feature is present in the node definition, the routine returns to decision block 
210, but if not it proceeds to block 220, which returns a FALSE status. 

In decision block 212, if there is a bus address to check, the routine proceeds to decision block 213, but if 
not it proceeds to decision block 214. In decision block 213, if the address probe was successful, the routine 
proceeds to decision block 214, but if not it proceeds to block 221 , which indicates a resource creation failure, 
50 and hence to block 222, which returns a FALSE status. 

in decision block 214, if there is a process existence to check the routine proceeds to decision block 215, 
but if not it proceeds to decision block 216. in decision block 215, if the process probe was successful, the 
routine passes to decision block 216, but if not it proceeds to block 221. 

In decision block 216, if there is a size compatibility to check, the routine proceeds to decision block 217, 
55 but if not it proceeds to block 218. In decision block 217, if the size check was successful, the routine 
proceeds to decision block 218, but if not it proceeds to block 221. in decision block 218, if there are more 
attributes to check, the routine returns to decision block 212, but if not it proceeds to block 219, which returns 
a TRUE status. 

60 Correlation of Flowcharts to Program Listings 
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initial Besource Processing 



Line Numbers in 
Program Lifting A 

Resource to process in this startup phase 
Check resource attributes in this node envlroniient 
Resource definition from template can be created 
New resource .group to open 
Insert in list of resource groups 
Check if resource is part of other groups 
Resource is part of other groups 
Instantiate resource 

More resources- in list of resource template 
Instantiate resource groups 



Instantiate Besource 

Resource to be synchronized 

Enqueue for synchronization 

Attribute to be replaced by file content 

Substitute attribute value by file 

Process to be created exists 

Attempt to create process 



53 


-58 






59 






50 






60 




61/ 


276- 


-280 


62, 


306- 


-342 


65, 


306- 


-342 




66 




67- 


-85, 


46 




87 





Line Numbers in 
Program Listing A 

127 

128, 248-249, 221-236 

132, 606-634 

133, 637-745 
139-141 
142-144 
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10 



15 



Process creation successful 143-144 

More processes to create 138 

Process to be notified exists 165-167 

Derive resource definition message from resource 177 
template 

Send resource definition message to process 176-178 

More processes to notify 164 

Check if resource is used to access more resource 191-199 
templates 



20 



25 



30 



35 



Derive Pesource Definition Message 

from Resource Template 

Attributes to check in node definition 

Make resource message by template duplication 

Duplicate resource template definition 

Locate attribute to check 

Valid attribute found in node definition 

Use found node attribute in resource message 

Remove attribute from resource message 

More attributes to check 

Insert all files specified as attribute values 



Line Numbers in 
Program Listing A 

477 

478 

480 
481-490 
488-496 

501 
495-499 

481 

506 , 701-718 
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45 



50 



55 



Check Resource Attributes in this 

Node Envi zTjrutb snt 

There is node feature to check 

Node feature is present in node definition 

There is bus address to check 

Probe of bus address is successful 

There is process existence to check 

Probe of process existence is successful 

Size of . compatibility has to be checked 

Size check is successful 

More attributes to check 



Line Numbers in 
Program listing B 
64 
65-76 
90, 105, 120 
98, 113, 128 
157, 169 
158-159, 170-171 
13? 
145 
84 



60 



65 



It will be apparent to those skilled in the art that the herein disclosed invention may be modified in numerous 
ways and may assume many embodiments other than the preferred form specifically set out and described 
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Accordingly, it is intended by the appended claims to cover ait modifications of the invention which fall within 
the true spirit and scope of the invention. 

What _ is claimed, is : 5 

10 
15 
20 
25 
30 
35 
40 
45 
50 
55 
60 
65 
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PROGRAM LISTING A 



8 

9 Module : XMX Xl% 

10 Dace submitted ; XEX 

11 Caretaker : Gabor Simor 

12 Origin : cX * . . 

13 Description : Creates and notifies processes about initial Ly availabl 

14 resources. 

15 - 

16 */ 

17 #ifndef lint. 

18 static char SrcIdCJ = M *ZX%M*:XI%"; 

19 #endif 
20 

21 #include <cX.h> 

22 ^include <os/vers.h> 

23 ^include "config.h" . 

24 ^include <errm.h> 

25 #include <9en_codes.h?- 
26 

28 Initial Processing of Resource Hessages at startup time 
30 

31 void cm_ini_not(hrdcoded) 

32 boa I hrdcoded; 

33 C 

34 extern void notifyO; 

35 extern bool checkjn_groups(); 

36 extern bool check__rsrc(); 

37 extern void new_group(); 

38 extern char *res_lst; 

39 extern void rls groupsO; 
40 

41 RES_HD *nxt_in_queue, *prv; 

42 MSG_HANDLE handle; 
A3 bool hrdc; 

44 

45 nxt_in_queue = prv = <RES_HD *) res_lst; 

46 while (nxt_in_queue) C 

47 Ini_handle(&handle,nxt_in_queue, , FALSE) ; 
48 

49 #if lONClINI^TRACS) 

50 printf ("resrc started Xs\n",Get triple(&handle,CLSS,_) ) ; 

51 #endif 
52 

53 if (Get tripleahandle,HRDC,_)> 

54 hrdc = TRUE; 

55 else 

56 hrdc = FALSE; 
57 

58 i f C ChrdcodedS&hrdc) | | C C ! hrdcoded )&&< I hrdc) ) ) C 

59 if (check_rsrc(&handle)> C 

60 if <Get_triple(&handle,GRPC,_)) <. 

61 new_group<&handle); 

62 check_in groupsC&handle) ; 

63 > 

64 else 

65 if ( !check_in_g roups (&handle) ) 

66 . ~ ~ nocify(Shandle) ; 
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67 

6a 

69 

70 

71 

72 

73 

7U 

75 

76 

77 

7S 

79 

80 

81 

82 

83 

84 

85 

86 

87 

88 

89 

90 

91 

92' 

93 

94 

95 

96 

97 

98 

99 

100 

101 

102 

103 

104 

105 

106 

107 

108 

109 

110 

111 

112 

113 

114 

115 

116 

117 

118 

119 

120 

121 

122 

123 

124 

125 

126 

127 

128 

129 

130 

131 

132 



prv = nxt_m_queue; 

nxt in_queue - nxt in queue- > nxt res; 

> 

else if (nxt_in_queue 1= <RES_HD *) res_lst) C 
prv->nxt_res = nxt_in_queue- >nxt_res; 
F ree< nxt_i requeue ) ; 
nxt in queue = prv- >nxt_res; 

etse 

nxt_in_queue * CCR£S_HB *) res_lst)->«xt_rei>; 



else < 

prv = nxt_in_queue; 

nxt_in queue's nxt_fn queue- >rtxt_res; 

y 

> 

rls_groups(); 



Instantiate Resource: 

- Create all specified service processes, if do not exist 
• Notify all specified processes, ■ i f t hey do e xist 



void notify(h) 
MSG HANDLE *h; 
C 

extern char *roemcpyO; 
extern Long New? roc O; 
extern void bad_rsrc(); 
extern char *Nxt_attr(); 
extern char *instmsg(); 
extern void to_syncnot( ); 
extern char *fTle_in_msg< >; 
extern void cm__open< ); 

extern bcot^sync NlM_state; 
extern boot^sync FILE_state; 

HSG_HANDLE hi, hrep; 
char *repmsg; 
CONNECTOR ntfconn; 
char *pcrt; 
char *pntf; 
char *boot_class; 
char *upstr; 
char *tmpL; 
char *f l Le; 
keyword *opkwd; 
char msg_idCMSGID_SI2E] , 



/* find' next given attribute */ 
/* instantiate a resource message* 
/* synch notify with •Msync" msg*/ 
/* took for file triples */ 
/* open a triple file */ 



/* Process mgt reply */ 
/* proc to~be notified on resrc */ 
/* process to create */ 
/* process to notify V 
/* class of hardcoded boot device* 
/* upstr to sync with */ 
/* proc tetnpl name in confrgfUe*/ 
/* file to read for triple cont */ 

*msid; /* message id to be sent */ 



#if 10N<UNI_TRACE) 

printfC'Xs in notify \n" ,Get_tripl e<h ,CLSS,_) ) ; 

#endif 

if Cupstr = (char *) Get_triple(h , SYNC,_)) C 
to_ syncnotCh, upstr) ; 
return; 
} 

if (file = file_injnsg(h,_, FALSE)) C 
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133 cnijopenCfc , file); 

134 return.; 

135 > 
136 

137 Ini_bandte(&M,h->msg_start / _,7RU£); 

138 while (pert = Nxt attr(Sh1 ,PCRT) ) C 

139 if (strcmo( "status" ,(repmsg = CalUNEXT, "Processjngt", 

140 Makemsg{4*2*)CEYSt2£+strten(pcrt}+10 l ,l query H / ,, name=#s; loci", 
'141 P<=rt>, _,_»)) < 

142 tmpC = Nxt_attr(&h1,TMPD; 

143 if (CINewProcessCpc^two^Ffttse, •?,_}>&& 

144 " (I Get triple(&hl,OPTN, ))) C 
145 

146 #if 10N(IIH1_TRACE> 

147 printf("Xs can not be created\n",pcrt); 

148 #endif 
149 

150 bed_rsrc(h,PROC_CREATEJ r A'lL>; 

151 . Free(repmsg); 

152 return: 

153 > 

154 > 
155 

156 Free(repmsg); 

157 y 
158 

159 #if lONCUM! JTRACE) 

160 printf( n %s port's processed \n M ,Get triple(h,CLSS, )); 

161 ■ #endif 
162 

163 Ini_handle(£hl,h->msg_start,_, TRUE); 

164 while (pntf = Nxt_attr(£h1 ,PNTF) ) C 

165 if nstrcmo( ,, status" / <repmsg = Cal UNEXT, "Processjngt", 

166 Makemsg(4*2*KEYSIZ£+strLen(pntf)+10 J "query", 

167 «riame=#s; Loci", pntf ) ,_,_) ) ) } C 

168 1 n i_handl e(&h rep ,recfnsg,_, TRUE); 

169 ntfeonn = *( (CONNECTOR *) Get tripte(&hrep,COHH,_) ); 

170 if (opkwd = (keyword *) Get_triple(h,OPID ,_) ) 

171 Alt_triple<h,*opkwd,sizeof (ntf conn.pid) ,&ntfconn.pid) ; 

172 if Cmsid = (char *) Get_triple<h,MSID,_)) 

173 strcpy(msg id,msid); 

174 else 

175 strcpy(msg_id, "resource"); 

176 Put(DIRECT,&ntfconn, 

177 memcpyCinstmsgCh) ,nBg_id, strlen<msg_id)+1 )); 

178 ( (RES HD *) h->msg start)->ntfpid = ntfconrwpid; 

179 > 

180 else if (!Get triple(&h1 ,0PTN, )) C 
181 

182 #if lON(UNIJTRACE) 

183 pr intf("Xs no process to not ify\n (1 , pntf ); 

184 #endif 
185 

186 bad rsrc(h,N0 PROC TO NOT); 

187 } - - _ 

188 Free(repnsg); 

189 } 
190 

191 if (Get_triple(&h1 ,SO0T,_)) C 

192 boot class = Get tripLe(Sh1 , CLSS, ); 

193 ~ 

194 if ( !strcmD(boot_class / "LAN ,t )) 

195 . NIH_state = polled; 

196 else if ( ! strcmo(boot_c lass , "disk_ctrl") ) 

197 FIL£_state = pollec; 

198 else 
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19 9 badj-src<h,BAD_BOOT_0EVJ)EF); 

200 > 

201 > 
202 



203 r 

204 



Synchronization notification to continue processing of a pending 

205 resource 

206 */ 
207 

208 void from syncnot(sync_hd, resmsg) 

209 HSG_HAMDLE *sync_hd; 

210 char * resmsg; 

211 <• 

212 extern char *Nxt_sttr<); 

213 extern void to_syncnot(); 

214 extern void ALt__key(); 

215 extern void notlfyC); 
216 

217 MSG_HANDLE resjid; 

213 char *upst_in, m upst; 

219 boot no_more_sync; 

220 " 

221 upst in = Get_tr.iple(sync hd,UPST,_); 

222 lniJiandle<&resJid,resnsg,_,NOFIX|SUSP); 

223 no more_sync = TRUE; 

224 while (upst - Nxt_attr(&resJid,SYNC) ) C 

225 if (I straro(upst,upst in)) 

226 AU_key<upst,UP); 

227 else C 

228 to_syncnot C &res_hd, upst ) ; 

229 no_more__sync = FALSE; 

230 " break; 

231 > 

232 > 
233 

234 if (nojnore sync) 

235 notify(&resJid); 

236 FreeCsync hd^msg^start); 

237 > 
238 

239 . /* ■ 
240 
241 

242 V 
243 

244 void to syncnotCh ,upst ) 

245 MSG_HANDLE *h; 

246 char *upst; 

\% Putcs C LF,_,M ems9 ^ synch)1/11upst=#s; sync =#I», upst, h - >msg -S tart ) ) ; 

250 > 

251 

252 

253 void Alt_key(v,k) 

254 char *v;~ 

255 keyword k; 

256 C 

257 v •= 2 * sizeof(k); 

258 *( (keyword *) v) = k; 

259 y 
260 

261 /* 

262 Open new resource group 

263 V 
264 



Ask for synchronization notification that triggers continuation 
of processing a resource 
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265 void new group(h) 

266 MSG_HANDLE *h; 

267 C 

268 exrern char *grp 1st; /* list of resource groups */ 
269 

270 RES HD *nxt i requeue; 

271 

272 #if 10N<IINI__TRACE) 

273 printfC'Xs in new_group\n", Get_tri pleCh,£L£S,_}); 

274 #endif 
275 

276 nxt_in_queue = <RES_HD *) grp_lst; 

277 while (nxt_in_queue~?-nxt_grp)~ 

278 nxt_in~queue = nxt in queue- >nxt grp; 
279 

280 nxt_in_queue- >nxt_g rp - (RES_HD *) h->msg_start; 

281 > 
2S2 

283 •"/*■ ' 

284 Check if a resource is a coroonent of any group 

285 If a resource belongs to more than one group, a I" I group resources bad 

286 */ 
287 

288 boot check_jn_groups(h) 

289 MSG HANDLE *h; 

290 C 

291 extern boot check_in_grp(); /* check if in one group */ 

292 extern void rmv rsrcO; /* remove resource */ 
293 

294 extern char *grp 1st; /* resource group list start V 

295 

296 RES HD *nxt_in queue; / /* next res group in list */ 

297 MSG^HANDLE hi;" /* current group checked */ 

298 MSG_HANDLE hgrp; /* located group head resrc */ 

299 boo! in a group; 

300 bool grp rmvd; /* grouo head resrc removed */ 
301 

302 #if lOMCUNI^TRACE) 

303 pn"ntfC"%s in check in groups\n",Get_triple(h, CLSS,_)>; 

304 #endif ~ " 
305 

306 grp_rrwd ~ FALSE ; 

307 in a group = FALSE; 
308 

309 nxt_in_queue = (CRES_HD *) grp_lst)->nxt_grp; 

310 while (nxt_injqueue) < 

311 if <nxt_in queue != (RES HD *) h->msg_start) < 
312 

313 Ini hand te(&h1,( char *) nxt_in_queue,_,TRUE); 

314 

315 if (checkJn_grpC&h1,h)) 

316 if ( ! in_a_group) < 

317 in_a group = TRUE; 

318 hgrp = hi; 
319 

320 #if 10NCIIMI TRACE) 

321 printf?"Xs grp head found: Xs\n n ,Get tripleCh ,CLSS,_) , 

322 Get"~tripleC&h1,CLSS,_)>; 

323 #endif 
324 

325 > 

326 else < 

327 bad_rs/c<&M, DOUBLE J5R0U?); 

328 . rmv_rsYc(£h1 ); 

329 if Cigrp rmvd) C 

330 bacTrsrc<&hgrp,DOU8L£_GRGUP>;. 
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rmv_rsrc(&hgrp) ; 
^33 grp_rmvd = TRUE; 



334 
335 



367 

3aa 



391 



> 



3 36 nxt in queue = nxt in queue* >nxt_grp; 

337 > 
338 

«o if (in a group&&! grp_rmvd) 

3^q ~~ returnCTRUE); 

7ai else 

3^2 returnC FALSE); 

343 > 
344 

ft! ^ Check if a resource is a co^onent of one P"**' u ^ ro ^ 

347 If it is, append it to the cooponent List ofthegroup 

|^ increinent msg nr count in each component 

349 */ 

351 static bool check_in_grp(hg # hc) head- handle V • 

III SS-SSSS^J r ^ent head handle V 

354 C 

356 RESJiD *nxt_in_lst; , co grouD conpS * 

357 keyword keyw; . ' * f the ^ attP fbute * 
353 unsigned long marksz; ' tQ mark actp - n grp hd * 

359 char *markg; £ tp tQ aCtr in cofTip * 

360 char -markc; J* following in the grp* 
36*, short *msnr; 7 y 

362 long zero; 

363 short short_zero; 

3^ keyw = '((keyword *) Get_triple(hg ,GRPC > ; 
366 



L 7 ■ if (markc = Get triple(hc,keyw, )> C 

3^ markg = GeOriple(hg;keyw,&marksz>; 

^70 - if (lstrncrrp(markg,markc r (int> marksz)) C 
371 

37| »if lONCim^c^ mat=h fQund . n dMekJnJirpVl . f6 . t _ tr ,pi.(hg.CLSS..)); 

374 #endif 

|£| nsnr = (short •> Gec_triple<hg,MSNR,_); 



3^3 Alt_tripte(hg,MSNR,sizeof(short),msnr), 

512 nxt in 1st = <RES_HD *) hg->msg_start; 

™« while 7nxt in_lst ->nxt_cc<Tp) 

|S1 nxtjnjst = nxtjnjst->nxtj:cflnp f 



382 
383 
384 

IOC 

3^ return(TRUE); 



else 



nxtJnJst->nxt.co.flp = CRESJW -} hc->msg__start ; 

re 
> 



330 returnC FALSE) ; 

390 



> 

else 



302 returnC FALSE) ; 

393 > 
394 

395 /* 
396 



Release all group lists, create and notify all related processes 
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397 (each resource is assumed to have been checked on exi stance) 

398 */ 
399 

400 static void rls_groups() 

401 C 

402 extern void notifyC); 

403 extern void rls grp(); 

404 extern char *grp 1st; /* list of resource groups */ 
405 

406 MSG_HAUDIE h; 

407 RES HO *nxt_in_lst; 
408 

409 nxt_in_lst = C(RES_HD *)' grp_lst)->nxt_grp; 

410 while (nxt_in_lst) i 

411 Ini_handle(&h,nxt_in 1st, ,TRUE) ; 
412 

413 #if IONCUNI TRACE) 

414 printf("Xs in rls_groups\n", Get_triple(Sh, CLSS ,_) ) ; 

415 '#endif ■ ■ ■ ■ 
416 

417 if (KCRES HO *) h.msg start) ->ntfpid) 

418 " " rls_grp(&h); 
419* nxt_in 1st = nxt_in_lst->nxt grp; ~ 

420 > 

421 > 

422 , 

423 static void rls_grp<hg) 

424 HSG_HAHDLE *hg; 

425 C 

426 extern void notifyO; 
427 

428 MSG HANDLE h; 

429 RESJiD *nxt_in_lst; 
430 

431 nxt_in_lst = (RES_HD *) hg->msg_start; 

432 while <nxt_in_lst) C 

433 . Ini_handle(&h,nxt_in 1st, ,TRUE); 

434 notify(fch); 

435 nxt_.in_lst = nxt in lsr->nx t_comp; 

436 > 

437 > 
438 

439 /* 

440 Get next field with same keyword from a standard cX message 

441 (brand new handle assumed at the 1st call, 

442 no external Nxt triple expected between caLls ) 

443 V 
444 

445 char *Nxt_attr(h,keyw) 

446 MSG_HANDLE *h; 

447 keyword keyw; 

448 < 

449 char *value; 

450 keyword k; 
451 

452 while (value = Hxt_triple(h r &k,_)) 

453 if (k =- keyw) 

454 returnC value); 

455 return(NULL); 

456 > 
457 

458 /* 

459 Instantiate a message (define node-deoendant attributes) 

460 */ 
461 

462 char *instmsg(h) 
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4 DO 




484 




485 




486 








too 




489 




490 




491 




492 




493 




494 




495 




496 




497 




498 




499 




500 




501 




502 




503 




504 




c nC 

505 




506 




507 




5Uo 


> 


509 




51 u 


/ 


511 




512 


*/ 


513 




514 


cna 


515 


cha 


516 


C 


517 




518 




519 




520 




521 




522 




523 




524 




525 


> 


526 




527 


/* 


528 





extern char *dupntsg(); 

extern boot attrjiameO; 

extern unsigned long Si ze_triple< ) ; 

extern char *Nxt_attr(); 

extern void ins_file(); 

extern RESJiD *node_res; 

MSG HANDLE hO, hi , hZ; 
keyword *attr_ref , *attr_def; 
char *attr_vaT; 

if <C!Get triple(h,S8ST, >) && C ! Get_triple(h , FMRP,_) ) ) 

re t urnCdupmsg C h • >msg_s t a r t ) ) ; 

Int handle<&h0,dupmsgCh->msg - start),_ / NOFIX|SUSP); 
while Cattr ref = (keyword ») Nxt_attrC&hO,SBST) ) £ 
if (!attr_naroe((char *) attr_ref)) 
continue; 

Ini handle(&M,h->msg start, FIX (SUSP) ; 
while (attr def = (keyword *) Nxt_attr(&h1 ,*attr_ref )) C 
if <lattr_name<<char *) attr_def)) 

continue; 
else if (!node_res) C 

Del_triple(&hQ f *attr_ref); 

continue; 

> 

Ini .handle«h2,node res,_, FIX|SUSP); 

if (Kattr vat = Hxt_attr(&h2,*attr_def )) > C ■ 

Del_triple?&hO,*attr_ref); 

continue; 

> ' 

whi le (Del_triple(&hO / *attr - ref )) 

Add_trfple<&hO ( *att/ref ,Site_tripte(attr_vaL) r attr_val); 
break; 

ins_file<&hO); 
return(h0.msg_start>; 



Duplicate a message 



extern char *ti>emcpy(3; 

char *newmsg; 
unsigned long size; 
MSGINFO tnsginfo; 

Msg_info(msg,&msginfo); . 
returnCmemcpy(AllocCinsginfo-sf ze),msg,msginta-si zcj); 



Return size of a triple 
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529 V 
530 

531 static unsigned long Size_tnple(val) 

532 char *val; 

533 C 

534 val - = sizeofC keyword); 

535 return(*( (unsigned long *} val)); 

536 > 
537 

538 /* 

539 Check if triple refers to an attribute name 

540 */ 
541 

542 static bool attr_name<val) 

543 char *vaL; 

544 C - - i ^ 

545 extern unsigned long Size_triple<); 

546 extern bool allascu'O; 
547 

548 if (Size_triple<val) != si zeofC keyword)) 

549 return(FALSE); 

550 else 

551 return(al lasci i (val r si zeof < keyword ) ) ) ; 

552 > 
553 

554 static bool allascii(p,k) 

555 char *p; 

556 int k; 

557 { 

553 extern bool my_isascn (); 
559 

560 bool all ascii; 

561 int i; 
562 

563 all_ascii = TRUE; 

564 for (f=0;i<k;i++) 

565 if (!my_isasci i<*<p+i))) 

566 all ascii = FALSE; 
567 

568 returnCa I l_asci i ) ; 

569 > 
570 

571 static bool my_?sasci i <c) 

572 char c; 

573 C 

574 if C (c>0x1f) && Cc<0x7f) ) 

575 return(TRUE); 

576 else 

577 returnC FALSE) ; 

578 > 
579 



530 / 
581 



Routines to replace f i le" reference triples with file content 

582 

583 f i le_in_msg(h) 



584 cm_open(h,f i le) 

585 cm_read< ch , conn) 

586 met tripleC rh,conn) 



look for file triples 
open triple file 

read a triple f i le . 
mark a triole file as read and close it 



587 ins~file<h) - insert all" marked triple fifes in res msg 

III ™ ?; irrci^ - check if "failed" is a triple file error 



588 cm_fmgt_err<fmh) - check if "failed 

589 V 

591 static char *f i le_in_msg(h, keypp, af ter_read) 

592 MSG_HAN0L£ *h; 

593 keyword *keypp; 

594 bool af ter^read; 
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595 <: 

596 extern char *Nxt_attr(); 

597 extern boot attr_natne( ) ; 
593 extern boot aUasciiO; 
599 extern void AltJceyO; 
600 

601 ^ MSG_HANDL£ hO, hi ; 

602 ^ keyword file; 

603 keyword w attr_ref; 

604 char *path; 
605 

606 if ( ! af ter_reed) 

607 file = FILE; 

608 else 

609 file = FIL0; 
610 

611 - *f <Get triple(h,f i le,_)) < 

612 lniliandle<&hO,h->nisg_start,_,FIX|SUSP5; 

613 while (attr ref = (keyword *) Nxt_attr(&h0, f i Le)) 

614 if (!attr nameCCchar *) attr_ref)) 
6^ "~ continue; 

616 e I se £ 

617 Ini handLe<&h1,h->n»g - 8tart l _ f FIX|SUSP); 

618 while (path * Hxc_attr(&hl f *ajtr ref )) 

619 if ((aUasc?i(peth,strlefKpath))) M 

620 <*path == '/') (strlen(path) > 2)) C 
6 ?i if (after read) 

622 Att_key(attr_ref,MFIL); 

625 else 

624 Alt_key<attr_ref,FIL0); 

625 if (keypp) 

626 * **eypp = *attr_ref; 

627 return(path); 
62S > 

629 « tse 

630 continue; 

631 > 

632 > 



633 

634 return(MULL); 

635 > 
636 

637 static void cm - open(h, f i Le) 

638 MSG_HANDl£ *h;~ 

639 char *fiie? 

640 i 

641 char *opmsg; 

t£ opmsg = H«^9<MINSIZM*2»^ 

64 4 ,l name=#s; on»d=#s; amod-^s', file, k , k j, 

645 Msg^parmCoomsg, (char *) h- >msg_start ) ; 

646 Put<N£XT, ,, Filejngt , \ opmsg); 

647 > 
648 

649 void cm_read(h, conn) 

650 MSG_HANDIE *h; 

651 CONNECTOR *conn; 

652 C 

653 extern void read_fite(); 
654 
655 

656 > 
657 

658 void met tr ipte(h,conn) 

659 MSG_HANDLE *h; 

660 CONNECTOR w conn; 



read,fUe<h,conn); /* same as in Process jpgt 
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661 

662 

663 

666 

665 

666 

667 

668 J 

669 

670 

671 

672 

673 

674 

675 

676 

677 

678 

679 

680 

681 

682 

683 

684 

685 

686 

687 

688 

689 

690 

691 

692 

693 

694 

695 

696 

697 

698 

699 

700 

701 

702 

703 



> 



extern void close_f i leO; /* same as in Process jngt */ 

extern char *f i le_in_msg( ); /* find first iile triple value */ 

extern void AltJceyO; /* change key fieLd of a triple */ 

extern void bad_rsrcO; /* change key field of a triple */ 

MSGIHFO msginfo; 
MSGJiANDLE reshhdl; 
char *resmsg, *path, *filel; 
keyword keyp; 

Msg_inf o(h - >msg_start /fensg i nf o ) ; 

resmsg = (char *) msginfo. tag; 

Inf _handle(&^eshndl , resmsg SUSP | HOF IX) ; 

close_f i le(h,conn); 

path = file_Jn msg<&reshndt,&keyp,TRUE); 
Add^tripleCh, KEYP, si zeof( keyp), Skeyp) ; 
*((char **) path) = h->msg_start; 
A I t_key(path , FMRP) ; 

if { ! Get_tripleC&reshndt , FILO ) 

i f ( I Get_tr i p I e(&reshnd I , SAD F , _) ) 

notifyC&reshndl); 

else 

bad rsrc(&reshndl,FILE READ__ERROR); 



static void ins_fileCh) 

MSG_HANDtE *h; 

C 

extern void Alt_key(); 

MSG_HANDLE hres, hfmrep; 

char *fmrep, **fmrepp; 

char *fdata; 

char *fptr; 

unsigned long fdsize; 

keyword *keypp; 

if <Get_triple(h, FMRP,_)) C 

ini~harxdle<£hres,h->msg_start,_, FIX | SUSP); 

whiTe Cfmrepp = (char **) Nxt attr(&hres, FHRP) ) C 
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704 fmrep - *fmrepp; 

705 Ini handle{&hfmrep,fmpep, -# FtX|SUSP); 

706 fdata = Get_tpiple<&hfmrep { DATA,4fdsize); 

7q 7 keypp = (keyword *) Get tnple«hfmrep,KEYP ( _) 

70S Add_t rj p I e< h , *keypp , f dsTze f f da t a ) ; 

709 Free(fmrep); 

710 > 

7 7 \\ ini hendle<&hres,h->msg_start,_,FIX|SUSP); 

713 while (fptp = Nxt_attr(&hres,MFIL>) 

( 7 \l AltJcey(fptr,FILE); 

j]l Inijiandle<&hres,h->msg_start,_, FIX (SUSP) ; 

717 w hiLe (Del_tnple<&hres p FKRP)) 

718 

719 y 

720 > 
721 

722 boo I cm - fmgt_err(fmh) 

723 MSG_HAHDLE *fnfi; 

725 extern char *f 1 le_mjnsg(; ; 
726 

727 MSG INFO msginfo; 

728 MSG^HANOLE reshndl; 

729 char *resmsg, *path, *req; 

730 keyword keyp; 

732 req = Gee triple<fmh,REQ,_); 

733 if (!strcmo< req, "close")) 

734 returnCTRUE); 

736 Hsg_infoCfmh->msg_start,8rfTTsginfo); 

737 resmsg = (char *) msginfo. tag; 

^9 if <lni harxlle<&reshndl r resinsg ( . / ^SP|NOFIX3> 

° if ("path = file in msgC&reshndl ,&keyp,TRU£) ) C 

^ " " Alt key(path,BAOF); 



740 
741 
742 
743 
744 

745 return( FALSE); 

746 > 



returnCTRUE); 
> 
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PROGRAM LISTING B 



9 Module : %M% %l% 

10 Date submitted : XEX %UX 

11 Author : Gabor Simor 

12 Origin : cX 

13 Description : Configuration Management Error Handling Routins 
14 



16:: 

17 #ifndef tint 

18 static char Srcldt] = "%2%%H%:%I%"; 

19 #endif. 
20 

21 include <cX.h> 

22 ^include <os/vers.h> 
25 #include "config.h" 

24 ^include <errm.h> 

25 ^include <gen_codes.h> 
26 

27 /* 

28 Check if resource available and if its attributes are consistent 

29 with the environment 

30 */ 
31 

32 boot check_rsrc(h} 

33 MSG_HAN0LE *h; 

34 C 

35 extern void bad_rsrcC); 

36 extern boo I ccxrptbl_size( ) ; 

37 extern char *Hxt__attr(); 

38 extern char *instmsg<); 
39 

40 extern RES_HD *node_res; 

41 

42 char *chck; 

43 char *badr; 

44 char *size; 

45 char *res_feat; 

46 char *p_name; 

47 char *repmsg; 

48 char *node__feat; 

49 ' boot resolved; 

50 MSG_KANDLE hO, hi, hsub; 

51 int~dontcare; 
52 

53 Inijtandleahsub, instmsgCh) ,_, FIX | SUSP); 

54 

55 #if lOM(UNr_TRACE) 

56 printfC'Xs in check rsrc\n" ,Get_tr iple(h,CLSS, )); 

57 #endif 
58 

5? /* 

60 check if associated node feature required 

6 1 */ 
62 

63 IniJiandle(£hO,hsub.msg_start,_, FIX* | SUSP ); 

64 while (res_feat s Nxt^attrC&hO, FEAT) ) C 

65 if (!node_res) < 

66 f ree(hsub.msg_start ) ; 



/* attribute to check V 

/* bus address */ 
/* buffer size of comms protocols */ 

/* node feature to be checked V 

/* process name to be checked */ 

/* reply message from Procjngt */ 

/* node feature found */ 

/* if current feature resolved V 
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67 
65 
69 
70 
71 
72 
73 
74 
75 
76 
77 
73 
79 
SO 
81 
82 
83 
84 
85 
86 
87 
88 
89 
90 
91 
92 
93 
94 
95 
96 
97 
98 
99 
100 
101 
102 
103 
104 
105 
106 
107 
108 
109 
110 
111 
112 
113 
114 
115 
116 
117 
118 
119 
120 
121' 
122 
123 
124 
125 
126 
127 
128 
12? 
130 
131 
132 



return(FALSE); 
> 

resolved = FALSE; 

Ini handle<&h1 , node_res,_, FIX | SUSP) ; 
while (node_feat = Nxt_attr(&h1 , FEAT) ) 
if (! strcmp(node_feat ,res_feat)) C 
resolved = TRUE; 
break; 
> 

if ( I resolved) C 

Free<hsub.tnsg_start) ; 
returnCFALSE); 

> 

Ini JiandleC&hO, hsub.msg_start,,_, FIX | SUSP); 
while (chck = Nxt_attrC&h0,CHC)O > C 

check on bus address existence 



if (*((long *) chck) — BAOR) C 



#1f lON(tIM^TRACE) t ^ i|5te ^ ^ ^ WRNn „ #Get _ tpi p le <h,CLSS,_)); 

#endif 

Ini Jiandleah1,hsub.msgjstart,_, FIX (SUSP); 

while Cbadr - Nxt attr(&h1 , BADR) ) ^ . , . r 

if t.HproWHP.ROS.MC—ign- ^*>,™ < 

Free(hsub.msg_start) ; 

returnCFALSE); 

> 

> 

else if (*(Clong *) chck) == YADR) C 

#if L0NaiNl - TR ^^ cfc , t%s w te ch ecked on BADR\n» f Get_tr iple<h , CLSS , _) ) ; 
#endif 

Ini_handle(&h1,hsub.msg_st'art l _ / FIX|SUSP); 

while <badr = Nxt attr(&h1 , YAOR) ) v * r 

if ( ! „ P r= be <HP_RaB,.CCuns ig ned I ""^^ rsrc(h ' BADR^NOMEXT ) ; 

Free(hsub.msg_start); 
return< FALSE) ; 

else if (*C(long *> chck) == HADR) { 

#if LOMCIINI.TRACE)^^ ^ ^ ^ 5A0R\n ,f j Get_tripl e(h , CLSS ) ) ; 

fifendif 

Ini handle(&h1 f hsub.msg_start, -f FIX|SUSP); 
while (badr = Nxt attrC&hl , WADR) ) 

if <Mprobi<HP_ROB,««un S i S ned lon S '^^IoTIxIstS 

Free(hsub.msg_start ) ; 

recurnC FALSE); 
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133 > 
134 

135 /* 

136 check on consistency of size attributes 

137 */ 
138 

139 else if (*<(long *) chck) == SIZE) 

HO if <!<size = Get triple(h,StZE, ))) < 

141 ~ ~bad_rsrc(h,NO_SIZE_TO_CHECK); 

142 Free(hsub.msg_start); 

143 returnC FALSE); 

144 > 

145 else if C!comptbl size(h # *C( long *) size))) < 

1 46 bad_rsrc (h, I NCOMPTBL_S I ZE ) ; 

147 Free(hsub.msg_start); 

148 returnC FALSE); 

149 > 

150 > 
15 151 

152 /* 

153 check if process existance conditions satisfied 

154 */ 
155 

156 Ini_handteCSh1 r hsub.msg_start, ,FIX|SUSP); 

20 157 while (p_name = Nxt_attr(&M ,PROO) 

1 ^ if Cstrcmp( "status" , crepmsg = Call CNEXT f "Process mgt" ,Makemsg 

< 2*2* KEYS IZE-^str I en<p_name)+1 /'query 11 /»name#s7 locl",p_n3me),_, 
™° bad_rsrc(h,PRQC_NONEXT); 
^ Free(hsub.msg_start); 

Free(repfnsg); 

25 1« returnC FALSE); 



165 else 

166 Free(repmsg); 
167 

168 Infjiandle(&h1,hsub.msg_start,_, FIX | SUSP); 

30 }% 9 while (p_name = Nxt_attr<£hl ,NPRC) ) 

if Cstrcmp(»failed",Crepmsg = Call CNEXT, "Process_rogt«\Makemsg 
]ll <2*2*KEYSIZE+strlen(p_name)+1 , "query" ,"najj>e#s; locl",p_name) , , 

bad_rsrc(h,PROC_EXIST); 
JTj Free(hsub.msg_start) ; 

\i£ Free(repmsg); 
]!/ returnCFALSE); 



35 W6 



177 else 
1^8 Free(repmsg); 

FreeChsub.msg_start); 



179 
180 



181 retum(TRUE);" 
40 182 > 



Claims 

1. In a distributed data processing system comprising a plurality of interconnected nodes (170-174, 
FIG. 7), at least one of said nodes (170) comprising a set of resource configuration rules for configuring 
50 resources on any node of the system, a method of configuring resources for a specific node of said 

system (171), said method comprising the steps of: 

a) providing to said specific node a resource definition message; and 

b) utilizing said resource definition message to configure a resource sever module for each 
resource type needed by said specific node. 

35 2. The method of configuring resources recited in claim 1 , wherein said resource definition message is 

derived from a resource template message which defines the attributes of a resource for ail anticipated 
node environments. 

3. The method of configuring resources recited in claim 2, wherein a plurality of resource template 
messages provide said set of resource configuration rules for said system. 
qq 4. The method of configuring resources recited in claim 1 , wherein said one node comprises a plurality 

of resource server modules. 

5. In a distributed data processing system comprising a plurality of interconnected nodes (170-174, 
FIG. 7), a method of configuring resources for one of said nodes (171 ), said method comprising the steps 
of: 

55 a) providing in said one node a configuration management process; 
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b) providing to said one node a node definition message which defines a configuration for said one 

c) providing to said one node a plurality of resource template messages which represent a set of 
generic configuration rules; 

d) using said configuration management process, said node definition message, and said 5 
resource template messages to create a resource server module for each resource type required by 

said one node; 

e) providing to said resource server module a resource definition message; and 

f) using said resource definition message to configure said resource server module. 

6 The method of configuring resources recited in claim 5, wherein said node definition message is 10 
derived from a node template message which defines the possible attributes of a node for all anticipated 
types of nodes in the system. 

7 The method of configuring re-sources recited in c/aim 5, wherein said resource definition message 
can be derived from a resource templaie message which defines me possible attributes of a resource for 
all anticipated node environments, 

8 The method of configuring resources recited in cJafm 5, wherein said resource deftnrtwn message is 
generated by an expert system in response to at least one resource template message and at least one 
node definition message. 

9. The method of configuring resources recited in claim 5, wherein said resource template message is 
generated by an expert system. » £ . 

10. The method of configuring resources recited in claim 5, wherein sajd node definition message is 
generated by an expert system. 
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© In a distributed system comprising a plurality of 
nodes (170-174, FIG. 7), each node is provided with 
the same set of generic configuration rules which 
configures the resources for the node according to 
the application requirements and .the hardware con- 
figuration of the node. The resource server modules 
(231-234, FIG. 8) are configurable at runtime by 
node-based configuration management processes 
(230) in accordance with information contained in 
resource definition messages. A resource definition 
message is derived from a resource template mes- 
sage in accordance with the information contained in 
the node definition message. Accordingly, adding or 
modifying resources at a given node can be accom- 
plished at start-up or at run time without affecting the 
remainder of the system. 
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